Does this skill provide automated security scanning?

While it performs some automated risk analysis, its primary purpose is to serve as a human-in-the-loop gate, providing the developer with the necessary context and checklists to perform a manual audit.

What triggers the Code Review Gate automatically?

The gate triggers automatically for security-sensitive paths (like /auth or /api), high-complexity functions (cyclomatic complexity > 15), or large changes involving more than 10 files or 500 lines.

Can I manually request a code review?

Yes, you can trigger the skill manually by using the /code-review command or by asking Claude to 'review my implementation' at any time.

What happens if I reject a code review?

When a review is rejected, the skill returns the project to the implementation phase. You must provide a reason, which helps the AI address the specific issues before the next review attempt.

Is there a way to bypass the review in an emergency?

Yes, for emergency production hotfixes, you can use the bypass-review command. This requires a mandatory reason and tracking ticket, and is logged for a post-deployment audit.

Code Review Gate

Name: Code Review Gate
Author: turbobeest

byturbobeest

•

セキュリティとテスト

Enforces mandatory human oversight for security-sensitive, complex, or high-volume code changes within the development lifecycle.

概要

The Code Review Gate skill acts as a critical quality control layer in the 'vibe coding' workflow, automatically pausing autonomous development when it detects high-risk changes. It targets security-sensitive directories, logic with high cyclomatic complexity, and large-scale refactors, presenting the human developer with a structured interface to approve, reject, or comment on specific lines of code. By bridging the gap between implementation and integration, this skill ensures that AI-generated contributions meet rigorous security, architectural, and quality standards before being merged.

主な機能

Automatic triggers for security-sensitive paths like auth, crypto, and API services
2 GitHub stars
Complexity analysis that flags functions with high cyclomatic complexity for review
Structured feedback loop with specific approve, reject, and comment actions
Comprehensive review checklists covering security, architecture, and test coverage
Automated reporting with JSON-based audit trails and completion signals

ユースケース

Preventing the introduction of overly complex or unmaintainable code patterns
Ensuring manual sign-off on authentication and cryptographic logic changes
Validating architectural boundary compliance during large-scale system refactors

概要

主な機能

Automatic triggers for security-sensitive paths like auth, crypto, and API services
2 GitHub stars
Complexity analysis that flags functions with high cyclomatic complexity for review
Structured feedback loop with specific approve, reject, and comment actions
Comprehensive review checklists covering security, architecture, and test coverage
Automated reporting with JSON-based audit trails and completion signals

ユースケース

Preventing the introduction of overly complex or unmaintainable code patterns
Ensuring manual sign-off on authentication and cryptographic logic changes
Validating architectural boundary compliance during large-scale system refactors